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IN THE CLAIMS : 

Amended claims follow. 

1 . (Currently Amended) A method implemented using a computer for dynamic 
adaptation of a system in accordance with a contract with criteria associated 
therewith, comprising: 

governing a security-related interaction between a plurality of 
components of the system utilizing the criteria of the contract, the 
components including an intrusion detection module which is subject to the 
governing; 

determining whether the security-related interaction between the 
components of the system meets the criteria of the contract; and 

adapting the security-related interaction between the components of 
the system upon the criteria of the contract not being met; 

wherein the contract is created bv advertising a capability to a control 
component which handles contract negotiations, receiving a proposed 
contract based on the capability, accenting the proposed contract receiving a 
seal message, receiving and storing a fallback proposed contract, and if 
replacement of the proposed contract is required, replacing the proposed 
contract with the fallback proposed contract 

2. (Previously Amended) The method as recited in claim 1 , wherein the 
security-related interaction between the components of the system is adapted 
by adjusting the contract. 

3. (Original) The method as recited in claim 2, wherein the contract is adjusted 
by a method selected from the group consisting of deactivation of the 
contract, modification of the contract, deletion of the contract, and activation 
of a different contract. 
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4. (Original) The method as recited in claim 1, wherein the criteria of the 
contract include cost model criteria, 

5. (Original) The method as recited in claim 4, wherein the cost model criteria 
is based on resource utilization. 

6. (Previously Amended) The method as recited in claim 4, wherein the cost 
model criteria is based on performance. 

7. (Original) The method as recited in claim 4, wherein the cost model criteria 
is based on service provisioning. 

8. (Cancelled) 

9. (Previously Amended) The method as recited in claim 1 , wherein the 
components include the intrusion detection module and an analysis module. 

10. (Cancelled) 

1 1 . (Currently Amended) A computer program product for dynamic adaptation 
of a system in accordance with a contract with criteria associated therewith, 
comprising: 

(a) computer code for governing a security-related interaction between a 
plurality of components of the system utilizing the criteria of the contract, the 
components including an intrusion detection module which is subject to the 
governing; 

(b) computer code for determining whether the security-related interaction 
between the components of the system meets the criteria of the contract; and 

(c) computer code for adapting the security-related interaction between the 
components of the system upon the criteria of the contract not being met; 
wherein the contract is created by advertising a capability to a control 
component which handles contract negotiations, receiving a proposed 

. contract based on the capability, accepting the proposed contract receiving a 
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seal message, receiving and storing a fallback proposed contract and if 
replacement of the proposed contract is required, replacing the proposed 
contract with the fallback proposed contract . 

12. (Previously Amended) The computer program product as recited in claim 1 1, 
wherein the security-related interaction between the components of the 
system is adapted by adjusting the contract. 

1 3 . (Original) The computer program product as recited in claim 1 2, wherein the 
contract is adjusted by a method selected from the group consisting of 
deactivation of the contract, modification of the contract, deletion of the 
contract, and activation of a different contract 

1 4. (Original) The computer program product as recited in claim 1 1 , wherein the 
criteria of the contract includes cost model criteria. 

1 5. (Original) The computer program product as recited in claim 14, wherein the 
cost model criteria is based on resource utilization. 

1 6. (Original) The computer program product as recited in claim 14, wherein the 
cost model criteria is based on performance. 

1 7. (Original) The computer program product as recited in claim 14, wherein the 
cost model criteria is based on service provisioning. 

18. (Cancelled) 

1 9. (Previously Amended) The computer program product as recited in claim 1 1 , 
wherein the components include the intrusion detection module and an 
analysis module. 

20. (Currently Amended) An apparatus for dynamic adaptation of a system in 
accordance with a contract with criteria associated therewith, comprising: 
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a module for: 

(a) governing a security-related interaction between a plurality of components of 
the system utilizing the criteria of the contract, the components including an 
intrusion detection module which is subject to the governing; 

(b) determining whether the security-related interaction between the components 
of the system meets the criteria of the contract; and 

(c) adapting the security-related interaction between the components of the 
system upon the criteria of the contract not being met; 

wherein the contract is created by advertising a capability to a control 
component which handles contract negotiations, receiving a proposed 
contract based on the capability, accepting the proposed contract, receiving a 
seal message, receiving and storing a fallback proposed contract and if 
replacement of the proposed contract is required, replacing the proposed 
contract with the fallback proposed contract . 

21 . (Currently Amended) A method implemented using a computer for dynamic 
adaptation of a system in accordance with a contract with criteria associated 
therewith, comprising: 

governing a security-related interaction between a plurality of 
components of the system utilizing the criteria of the contract, the 
components including a plurality of intrusion detection modules, and at least 
one firewall which are subject to the governing; 

determining whether the security-related interaction between the 
components of the system meets the criteria of the contract utilizing an 
analysis module; and 

adapting the security-related interaction between the components of 
the system upon the criteria of the contract not being met utilizing the 
analysis module; 

wherein the security-related interaction between the components of 
the system is adapted by adjusting the contract by a method selected from the 
group consisting of deactivation of the contract, modification of the contract, 
deletion of the contract, and activation of a different contract; 
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wherein the contract is created by advertising a capability to a control 
component which handles contract negotiations, receiving a proposed 
contract based on the capability, accepting the proposed contract receiving a 
seal message, receiving and storing a fallback proposed contract, and if 
replacement of the proposed contract is required, replacing the proposed 
contract with the fallback proposed contract 

22. (Previously Presented) The method as recited in claim 21, wherein the 
intrusion detection modules are adapted for communicating information to 
the analysis module for detecting intrusions. 

23. (Previously Presented) The method as recited in claim 22, wherein 
information includes generalized intrusion detection objects. 

24. (New) The method as recited in claim 1 , wherein the proposed contract is 
selected from a predetermined set 

25. (New) The method as recited in claim 1 , wherein it is determined that 
replacement of the proposed contract is required when the interaction 
governed by the proposed contract no longer meets criteria of a cost model. 
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